Booking.com
2.3M guest records compromised in phishing campaign targeting hotels
2026 Data Breaches Year-to-Date (665 indexed)
Societe Generale (2026)
1.5M customer records compromised in second incident
Bosch Group
560K manufacturing and IoT device records exposed
Scotiabank (Canada)
2.1M customer records from Caribbean and Central American operations exposed
Government of Prince Edward Island
78K health card records compromised
MEC (Mountain Equipment)
450K member records compromised
City of Winnipeg (2026)
280K resident records compromised
The Ottawa Hospital
780K patient records exposed in data exfiltration
Instagram (Alleged Leak)
17.5M account records posted to BreachForums
NEC Corporation
560K corporate client records stolen
City of Toronto (2026)
420K resident records stolen in targeted attack
CIRO (Canadian Investment Regulatory Org)
750K Canadian investors exposed — SINs, income, account statements via phishing attack
Starbucks Corporation
950K rewards member records exposed via API vulnerability in mobile order-ahead system
Social Security Administration
3.6M beneficiary records exposed via compromised contractor with access to benefits system
Cleveland Clinic
1.3M patient records exposed via zero-day in medical imaging PACS system
Epic Systems (Vendor Incident)
2.1M patient records accessed via compromised third-party integration at EHR giant
Linear (Project Management)
120K workspace records exposed via OAuth misconfiguration
MedStar Health (2026)
2.1M patient records compromised in ransomware incident
Accenture (Client Data)
1.4M client consulting records from 23 countries exposed via LockBit affiliate intrusion
SNC-Lavalin / AtkinsRealis (Canada)
190K employee and project records from Canadian engineering firm compromised
Microsoft Office
Microsoft Office PowerPoint Code Injection Vulnerability — Microsoft Office PowerPoint contains a code injection vulnerability that allows remote attackers to execute arbitrary code via a PowerPoint file with an OutlineT
Hewlett Packard Enterprise (HPE) OneView
Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability — Hewlett Packard Enterprise (HPE) OneView contains a code injection vulnerability that allows a remote unauthenticated user to perform remote code ex
Bombardier Aerospace
Engineering documents and employee data stolen via Accellion FTA exploit — posted on CL0P leak site
WhiteDate
20,363 records exposed — Ages, Astrological signs, Bios, Device information and 18 more